Lucene search
+L

18219 matches found

osv-cve
osv-cve
•added 2026/08/11 5:19 p.m.•20 views

CVE-2026-69320

Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS5.7AI score
SaveExploits0References1
NVD
NVD
•added 2026/08/11 5:18 p.m.•21 views

CVE-2026-48385

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

7.7CVSS0.01582EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/11 5:17 p.m.•20 views

CVE-2026-48362

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio...

10CVSS0.03505EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:05 p.m.•23 views

EUVD-2026-56588

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00462EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:05 p.m.•19 views

EUVD-2026-56561

Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS6.2AI score0.00863EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 4:31 p.m.•18 views

EUVD-2026-56549

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

7.7CVSS5.3AI score0.01582EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/11 4:31 p.m.•70 views

CVE-2026-48385

CVE-2026-48385 affects ColdFusion and is described as an Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability that could bypass security features and grant unauthorized write access. The issue can be triggered remotely (attack vector: NETWORK) wit...

7.7CVSS5.9AI score0.01582EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/08/11 4:31 p.m.•16 views

CVE-2026-48385

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

7.7CVSS5.3AI score0.01582EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/11 4:31 p.m.•11 views

CVE-2026-48385 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

7.7CVSS5.9AI score0.01582EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 4:31 p.m.•46 views

CVE-2026-48385 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

7.7CVSS0.01582EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/11 4:30 p.m.•127 views

CVE-2026-48362

Technical details for CVE-2026-48362 are not publicly available in the provided documents. Monitor for updates from official advisories.

10CVSS7.1AI score0.03505EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/08/11 4:30 p.m.•21 views

CVE-2026-48362

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio...

10CVSS7.1AI score0.03505EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/11 4:30 p.m.•20 views

EUVD-2026-56539

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio...

10CVSS7.1AI score0.03505EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/11 4:30 p.m.•13 views

CVE-2026-48362 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio...

10CVSS7.1AI score0.03505EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 4:30 p.m.•48 views

CVE-2026-48362 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio...

10CVSS0.03505EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/08/11 2:00 p.m.•81 views

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS6.2AI score0.00863EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/08/11 2:00 p.m.•91 views

GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00462EPSS
SaveExploits0
NVD
NVD
•added 2026/08/11 12:17 p.m.•29 views

CVE-2026-72603

An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field. The client name is written to the WireGuard configuration file witho...

9.9CVSS0.02235EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 11:15 a.m.•62 views

CVE-2026-72603 wg-easy wg-easy - OS Command Injection

An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field. The client name is written to the WireGuard configuration file witho...

9.9CVSS0.02235EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 11:15 a.m.•20 views

EUVD-2026-56042

An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field. The client name is written to the WireGuard configuration file witho...

9.9CVSS6.8AI score0.02235EPSS
SaveExploits0References1
Rows per page
Query Builder